Markets in Crypto-Assets Regulation
MiCA creates a comprehensive regulatory framework for crypto-assets in the EU, covering issuers of asset-referenced tokens and e-money tokens, and crypto-asset service providers (CASPs).
What does MiCA require and when does it apply?
MiCA applies to Crypto-asset Issuers and Crypto Exchanges organisations across all EU member states. The key deadline is December 30, 2024 (full application). Non-compliance carries a maximum penalty of €5M or 3% of annual turnover (CASPs). Core obligations include publish compliant whitepaper for token issuance and obtain casp licence from national authority.
- Publish compliant whitepaper for token issuance
- Obtain CASP licence from national authority
- Implement transaction monitoring (AML/CFT)
- Maintain segregated client asset custody
- Meet capital and governance requirements
| Deadline | December 30, 2024 (full application) |
| Max fine | €5M or 3% of annual turnover (CASPs) |
| Primary sectors | Crypto-asset Issuers, Crypto Exchanges, Wallet Providers |
MiCA: €5M or 3% of annual turnover (CASPs) max fine
MiCA applies to Crypto-asset Issuers and Crypto Exchanges organisations in all EU member states. Key deadline: December 30, 2024 (full application).
Source: Official Journal of the European Union — Markets in Crypto-Assets Regulation
December 30, 2024 (full application)
€5M or 3% of annual turnover (CASPs)
Crypto-asset Issuers, Crypto Exchanges, Wallet Providers
The highest penalty for non-compliance with MiCA in the EU.
EU Official Journal
How do I comply with MiCA?
- Publish compliant whitepaper for token issuance
- Obtain CASP licence from national authority
- Implement transaction monitoring (AML/CFT)
- Maintain segregated client asset custody
- Meet capital and governance requirements
Does MiCA apply to your business?
Find out in 2 minutes with our free regulation checker.
Check now — freeMiCA by Country
Related Regulations
AI Act
The EU AI Act classifies AI systems by risk level and imposes obligations on providers and deployers. High-risk systems face mandatory conformity assessments, documentation, and human oversight requirements.
GDPR
GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.
NIS2
NIS2 expands cybersecurity obligations to essential and important entities across critical sectors. It mandates risk management, incident reporting, and supply chain security.
Next step — classify
Classify your AI systems
Use the free regulation checker to find out exactly which MiCA obligations apply to your business in 2 minutes.
For informational purposes only. This is not legal advice — consult qualified legal counsel.
Last updated: · Editorial policy